At Zerosploit, I engineer hybrid Elastic, IBM QRadar, and Microsoft Sentinel environments for clients in e-Payment, e-Trading, and Construction. These stacks ingest more than 250 GB of telemetry per day.
I architected more than 10 n8n SOAR playbooks integrating security platforms and AI agents, automating about 70% of Tier-1 alert enrichment and cutting MTTA by 60%. I also authored and tuned more than 35 MITRE ATT&CK-aligned correlation rules, reducing false positives by 40%.
My work also includes tuning CrowdStrike Falcon across more than 6,000 endpoints, managing F5 WAF policies, and writing incident response runbooks. I’ve managed vulnerability scanning with Tenable Security Center and deployed Microsoft Purview with Claude Enterprise for AI data governance.
